Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.809048
Kategorie:Denial of Service
Titel:Wireshark Multiple Denial of Service Vulnerabilities (Sep 2016) - Windows
Zusammenfassung:Wireshark is prone to multiple denial of service vulnerabilities.
Beschreibung:Summary:
Wireshark is prone to multiple denial of service vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- The 'epan/dissectors/packet-ipmi-trace.c' script in the IPMI trace dissector
mishandles string.

- A stack-based buffer overflow error in 'epan/dissectors/packet-catapult-dct2000.c'
script in the Catapult DCT2000 dissector.

- The 'epan/dissectors/packet-umts_fp.c' script in the UMTS FP dissector
does not ensure that memory is allocated for certain data structures.

- The 'epan/dissectors/packet-catapult-dct2000.c' script in the Catapult
DCT2000 dissector does not restrict the number of channels.

- The 'epan/dissectors/packet-h225.c' in the H.225 dissector calls snprintf
with one of its input buffers as the output buffer.

- The 'epan/dissectors/packet-qnet6.c' in the QNX6 QNET dissector mishandles
MAC address data.

Vulnerability Impact:
Successful exploitation will allow remote
attackers to conduct denial of service attack.

Affected Software/OS:
Wireshark version 2.0.x before 2.0.6
on Windows.

Solution:
Upgrade to Wireshark version 2.0.6 or
or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2016-7175
http://www.securitytracker.com/id/1036760
Common Vulnerability Exposure (CVE) ID: CVE-2016-7176
Debian Security Information: DSA-3671 (Google Search)
http://www.debian.org/security/2016/dsa-3671
Common Vulnerability Exposure (CVE) ID: CVE-2016-7177
Common Vulnerability Exposure (CVE) ID: CVE-2016-7178
Common Vulnerability Exposure (CVE) ID: CVE-2016-7179
Common Vulnerability Exposure (CVE) ID: CVE-2016-7180
CopyrightCopyright (C) 2016 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.